                                   "%s?code=%s&state=%s"
                                   callback-uri code state
                                   )}
-                       :cookies {"session-id" (->cookie session)}}))))
+                       :cookies {SESSION-ID (->cookie session)}}))))
                ;; Fail
                {:status 302
                 :headers {"Location" (format "%s" (path-for (:modular.bidi/routes req) ::get-authenticate-form))}

         :body (html
                [:body
                 [:h1 "API Server"]
                 [:p "The application with client id " (get-session-value req  "session-id" (:session-store this) :client-id)
                  " is requesting access to the Azondi API on your behalf. Please login if you are happy to authorize this client."]
                 [:form {:method :post
                         :action (path-for (:modular.bidi/routes req) ::post-authenticate-form)}

            (cookies-response
                      {:status 302
                       :headers {"Location" (path-for (:modular.bidi/routes req) ::get-authenticate-form)}
                       :cookies {SESSION-ID (->cookie session)}}))))
         wrap-params)

     ::get-authenticate-form
